runner.environment-provision-kubernetes

Provision Kubernetes runner workloads for a runner group

Provision Secret + Deployment on a customer Kubernetes cluster (BYO).

Overview

Property	Value
Workflow type	Dag
Library	App-runners
Version	1.0

Input Schema

Field	Type	Required	Default	Description
runner_group_uuid	uuid	Yes	—	UUID of the RunnerGroup this action operates on, picked from the organization's list of runner groups.
organization_uuid	uuid	Yes	—	UUID of the caller's organization, injected server-side from the authenticated request; scopes the operation to the correct tenant.
registry_account_uuid	uuid	No	—	UUID of the container registry account this runner group resolves images against, picked from the organization's registry accounts. Optional — falls back to default/unauthenticated image resolution when absent.
workflow_run_id	string	No	—	—

Output Schema

Field	Type	Required	Default	Description
runner_group_uuid	uuid	No	—	UUID of the RunnerGroup this action operates on, picked from the organization's list of runner groups; echoed on output alongside terminal/error payloads.
organization_uuid	uuid	No	—	UUID of the caller's organization, injected server-side from the authenticated request; scopes the operation to the correct tenant. Echoed on output alongside terminal/error payloads.
runner_execution_uuid	uuid	No	—	UUID of the RunnerExecution this action operates on, picked from the organization's (optionally group-scoped) list of executions; echoed on output alongside terminal/error payloads.
workflow_uuid	string	No	—	Engine workflow-run identifier (or, for GitHub-Actions-triggered flows, an external GitHub Actions run id) associated with this record; not a platform entity foreign key despite the name. No source is attached since there is no list/query workflow for an internal run id.
status	string	No	—	—
outcome	string	No	—	—
initiated_at	string	No	—	—
completed_at	string	No	—	—
failed_at	string	No	—	—
failure_reason	string	No	—	—
error	string	No	—	—
error_type	string	No	—	—
actor_uuid	uuid	No	—	UUID of the user or service actor who triggered this action, injected server-side from the authenticated request when available; used for audit/attribution only. Optional — omitted for system or service-triggered actions with no human actor.
reason	string	No	—	—
workflow_run_uuid	string	No	—	Engine-stamped correlation/run id for this DAG execution (ADR-015/E1 plumbing), written into state_data by action_start; not a foreign key to any business entity. No source is attached since there is no list/query workflow for an internal run id.
retry_count	integer	No	—	—
retried_from	string	No	—	—
failed_step	json	No	—	—
failed_layer	json	No	—	—
failed_at_state	json	No	—	—
compensation_trigger	json	No	—	—
comp_current_layer	json	No	—	—
comp_queue	json	No	—	—
comp_retry_count	json	No	—	—
validate_kubernetes_environment	json	No	—	—
provision_kubernetes_workloads	json	No	—	—
finalize_kubernetes_environment	json	No	—	—

DAG Layers

#	Layer	Steps	Compensation
1	validate	runner.validate_kubernetes_environment	—
2	provision	runner.provision_kubernetes_workloads	—
3	finalize	runner.finalize_kubernetes_environment	—

Execution Flow

Sub-workflows

Sub-workflow	Step name
runner.validate_kubernetes_environment	validate_kubernetes_environment
runner.provision_kubernetes_workloads	provision_kubernetes_workloads
runner.finalize_kubernetes_environment	finalize_kubernetes_environment

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "runner.environment-provision-kubernetes",
  "initial_data": {
    "runner_group_uuid": "value",
    "organization_uuid": "value"
  }
}